you have not put any comparisons into the login behavior.
on the find record tab, you need to set it to compare the email address column against the email address form element and the password column against the password form element
where that is left blank, there is no comparison to make, thus a record is found and you are logged in. . .